Ownerproof Privacy Policy

Version 2.1. Last updated March 7, 2026. For questions about this document, contact [email protected].

This Privacy Policy explains how Ownerproof LLC ("Ownerproof," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information and business data when you use Ownerproof at https://ownerproof.io. We take the privacy and security of your data seriously, particularly given the sensitive nature of the financial and business information you entrust to us.

Please read this Privacy Policy carefully. By creating an account, uploading documents, or using Ownerproof in any way, you consent to the data practices described in this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service at https://ownerproof.io/terms.

1. Information We Collect

We collect information in three ways: information you provide directly, information collected from your documents and recordings, and information collected automatically when you use Ownerproof.

### 1.1 Information You Provide Directly

When you create an account, complete the questionnaire, or interact with Ownerproof, you may provide:

### 1.2 Information From Documents and Recordings

When you upload documents or participate in a recorded interview, we collect and process:

Voice recordings are used for transcription only. Our speech-to-text processing does not create voiceprints, biometric identifiers, or speaker identification profiles. Voice recording is not biometric data processing as defined under Colorado HB 24-1130 or similar state laws.

Uploaded documents, including tax returns, are processed through automated redaction before permanent storage. Social Security numbers are identified and removed from documents before the file is saved to our secure storage. Ownerproof does not store, display, or process unredacted Social Security numbers at any point in Ownerproof's workflow.

### 1.3 Information Collected Automatically

When you access Ownerproof, we automatically collect:

2. How We Use Your Information

### 2.1 Providing the Services

### 2.2 Account Management and Support

### 2.3 Product improvement

### 2.4 Safety and Compliance

### 2.5 What We Do NOT Use Your Information For

3. Highly Confidential Business and Financial Data

We recognize that the data you share with Ownerproof includes some of the most sensitive information a business owner possesses: tax returns, financial statements, employee details, customer lists, and proprietary business information. We treat all Customer Data as highly confidential and apply our highest level of protection to it.

While standard financial records such as profit and loss statements, revenue figures, and business tax returns may not constitute statutory "Sensitive Data" under state privacy laws like the Colorado Privacy Act (C.R.S. 6-1-1301 et seq.), we recognize their highly confidential nature and apply strict safeguards equivalent to our most protective data category.

Tax return documents are processed through automated SSN redaction immediately upon upload, before permanent storage. After processing, documents are stored in encrypted form using AES-256 encryption at rest. Access to raw document files is restricted to authorized Ownerproof processes only. No Social Security numbers are extracted, stored, displayed, or transmitted by Ownerproof at any point.

You may withdraw your consent to financial data processing at any time by deleting your account or by contacting [email protected]. Withdrawal of consent may affect your ability to use features that depend on financial data processing.

4. Who We Share Your Information With

We do not sell your data. We share your information only with the third-party service providers ("processors") necessary to operate Ownerproof, and only to the extent required for them to perform their specific function.

### 4.1 Third-Party Processors

We will update this list if we add or change third-party processors and will provide notice of material changes as described in Section 13.

### 4.2 Other Disclosures

5. How We Protect Your Information

We implement comprehensive technical and organizational measures to protect your data. Given that Ownerproof handles financial records, tax returns, and other sensitive business information, security is a core priority.

### 5.1 Technical Safeguards

### 5.2 Organizational Safeguards

### 5.3 Limitations

While we implement commercially reasonable security measures, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security. In the event of a data breach, we will comply with all applicable notification requirements, including Colorado's breach notification law (C.R.S. 6-1-716).

6. Data Retention

We retain your data only as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy.

Aggregated, anonymized, and de-identified data is not subject to deletion requests and may be retained indefinitely, as it cannot be used to identify you or your business.

7. Your Privacy Rights

We honor the following rights for all customers, regardless of location, as a matter of policy.

### 7.1 Rights Under the Colorado Privacy Act (C.R.S. 6-1-1304)

If you are a Colorado resident, you have the right to access, correction, deletion, data portability, and to opt out of the sale of personal data and targeted advertising. Ownerproof does not sell personal data or engage in targeted advertising. If we deny your privacy request, you may appeal by contacting [email protected] with "Appeal" in the subject line. We will respond within forty-five (45) days.

### 7.2 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the right to know, the right to delete, and the right to opt out of sale. Ownerproof does not sell personal information as defined under the CCPA. We will not discriminate against you for exercising your CCPA rights.

### 7.3 How to Exercise Your Rights

We will verify your identity before processing your request. We will respond to verified requests within forty-five (45) days, with the possibility of a forty-five (45) day extension for complex requests (with notice to you explaining the reason).

You may designate an authorized agent to make privacy requests on your behalf. Authorized agents must provide written proof of authorization and we may require you to verify your identity directly with us.

8. Cookies and Tracking Technologies

We use a limited number of cookies and similar technologies to operate Ownerproof. We do not use cookies for advertising purposes.

We do not use third-party advertising cookies, tracking pixels, social media widgets, retargeting tools, or any technology that tracks you across other websites.

9. Artificial Intelligence and Automated Processing

AI is central to how Ownerproof operates.

AI technology is inherently probabilistic. AI-generated outputs may contain errors, omissions, or inaccuracies. You are responsible for reviewing all AI-processed data before relying on it or distributing any Ownerproof output.

Ownerproof does not use your individual Customer Data to train AI models. Our AI providers (Anthropic and OpenAI) operate under commercial API terms that explicitly prohibit the use of API-submitted data for model training. Your financial documents, tax returns, business records, and interview recordings are never used to train any AI system.

In accordance with the Colorado AI Act (C.R.S. 6-1-1701 et seq., effective June 30, 2026), we disclose that Ownerproof uses AI to process your data and generate outputs as described in this section. The Ownerproof Score is a documentation readiness assessment, not a consequential decision as defined by the Act. You, as the business owner, are the final decision-maker regarding all business sale and transfer decisions.

10. Children's Privacy

Ownerproof is designed for business owners and is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a person under 18, we will delete that information promptly. If you believe a minor has provided us with personal information, contact [email protected].

11. Data Location and International Transfers

Ownerproof processes and stores data in the United States. Our primary infrastructure is hosted in the US through Supabase and our hosting provider. If you access Ownerproof from outside the United States, your data will be transferred to and processed in the United States. Some third-party processors may process data in locations outside the United States as required by their infrastructure. By using Ownerproof, you consent to that transfer and processing.

12. Data Breach Notification

In the event of a data breach involving your personal information, we will comply with all applicable notification requirements:

Breach notifications will include a description of the incident, the types of information involved, the steps we are taking in response, and contact information for additional inquiries.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

Your continued use of Ownerproof after the effective date of a material change constitutes acceptance of the updated Privacy Policy. If you do not agree, you should stop using Ownerproof and may request deletion of your data.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact:

Ownerproof LLC 1859 28th St Denver, CO 80216

Privacy inquiries: [email protected] General support: [email protected] Legal matters: [email protected] Phone: (720) 535-5505

We aim to respond to all privacy-related inquiries within five (5) business days.

By using Ownerproof, you acknowledge that you have read and understood this Privacy Policy.

Ownerproof LLC, 1859 28th St, Denver, CO 80216. Phone (720) 535-5505. Sales [email protected]. Support [email protected].